1999

Solaris dmi_cmd allows local users to crash the dmispd daemon by adding a malformed file to the /var/dmi/db database.

wmmon in FreeBSD allows local users to gain privileges via the .wmmonrc configuration file.

The default configurations for McAfee Virus Scan and Norton Anti-Virus virus checkers do not check files in the RECYCLED

Buffer overflow in Linux linuxconf package allows remote attackers to gain root privileges via a long parameter.

Buffer overflow in UnixWare i2odialogd daemon allows remote attackers to gain root access via a long username/password a

Ipswitch IMail 5.0 and 6.0 uses weak encryption to store passwords in registry keys, which allows local attackers to rea

wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted

Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments t

classifieds.cgi allows remote attackers to execute arbitrary commands by specifying them in a hidden variable in a CGI f

Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.

daynad program in Intel InBusiness E-mail Station does not require authentication, which allows remote attackers to modi

Buffer overflow in VDO Live Player allows remote attackers to execute commands on the VDO client via a malformed .vdo fi

Modifications to ACLs (Access Control Lists) in Microsoft Exchange 5.5 do not take effect until the directory store cac

Buffer overflow in Solaris sadmind allows remote attackers to gain root privileges using a NETMGT_PROC_SERVICE request.

Buffer overflow in Solaris snoop allows remote attackers to gain root privileges via GETQUOTA requests to the rpc.rquota

Buffer overflow in Xshipwars xsw program.

htdig allows remote attackers to execute commands via filenames with shell metacharacters.

Buffer overflow in Solaris snoop program allows remote attackers to gain root privileges via a long domain name when sno

Buffer overflow in Internet Explorer 5 directshow filter (MSDXM.OCX) allows remote attackers to execute commands via the

The Sun Web-Based Enterprise Management (WBEM) installation script stores a password in plaintext in a world readable fi

UnixWare pkgtrans allows local users to read arbitrary files via a symlink attack.

ORBit and esound in Red Hat Linux 6.1 do not use sufficiently random numbers, which allows local users to guess the auth

UnixWare programs that dump core allow a local user to modify files via a symlink attack on the ./core.pid file.

Buffer overflow in UnixWare xauto program allows local users to gain root privilege.

IBM WebSphere sets permissions that allow a local user to modify a deinstallation script or its data files stored in /us

Buffer overflow in RSAREF2 via the encryption and decryption functions in the RSAREF library.

Buffer overflow in Netscape Enterprise Server and Netscape FastTrack Server allows remote attackers to gain privileges v

Buffer overflow in FreeBSD gdc program.

FreeBSD mount_union command allows local users to gain root privileges via a symlink attack.

Buffer overflow in Qpopper (qpop) 3.0 allows remote root access via AUTH command.

Buffer overflow in CDE dtmail and dtmailpr programs allows local users to gain privileges via a long -f option.

Buffer overflow in CDE mailtool allows local users to gain root privileges via a long MIME Content-Type.

A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext netwo

Windows NT Task Scheduler installed with Internet Explorer 5 allows a user to gain privileges by modifying the job after

Oracle Web Listener 2.1 allows remote attackers to bypass access restrictions by replacing a character in the URL with i

Buffer overflow in Linux su command gives root access to local users.

Buffer overflow in SCO su program allows local users to gain root access via a long username.

Vulnerability in HP Series 800 S/X/V Class servers allows remote attackers to gain access to the S/X/V Class console via

Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a

Internal HTTP server in Sun Netbeans Java IDE in Netbeans Developer 3.0 Beta and Forte Community Edition 1.0 Beta does n

Buffer overflow in Vermillion FTP Daemon VFTPD 1.23 allows remote attackers to cause a denial of service, and possibly e

Buffer overflow in Solaris kcms_configure via a long NETPATH environmental variable.

Windows NT does not properly download a system policy if the domain user logs into the domain with a space at the end of

Pine before version 4.21 does not properly filter shell metacharacters from URLs, which allows remote attackers to execu

Web server in Tektronix PhaserLink Printer 840.0 and earlier allows a remote attacker to gain administrator access by di

Lynx 2.x does not properly distinguish between internal and external HTML, which may allow a local attacker to read a "s

Buffer overflow in thttpd HTTP server before 2.04-31 allows remote attackers to execute arbitrary commands via a long da

Buffer overflow in POP3 server of Admiral Systems EmailClub 1.05 allows remote attackers to execute arbitrary commands v

The Delegate application proxy has several buffer overflows which allow a remote attacker to execute commands.

The networking software in Windows 95 and Windows 98 allows remote attackers to execute commands via a long file name st